CN105357032A - Method for combining history warning quantities of oscillation flash warnings - Google Patents
Method for combining history warning quantities of oscillation flash warnings Download PDFInfo
- Publication number
- CN105357032A CN105357032A CN201510660544.5A CN201510660544A CN105357032A CN 105357032 A CN105357032 A CN 105357032A CN 201510660544 A CN201510660544 A CN 201510660544A CN 105357032 A CN105357032 A CN 105357032A
- Authority
- CN
- China
- Prior art keywords
- muscle
- alarm
- warning
- sudden strain
- concussion
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/069—Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
The invention discloses a method for combining history warning quantities of oscillation flash warnings. The method comprises the following steps: S1, determining and setting a flash warning duration and an oscillation time interval; S2, initializing a flash warning table and a flash warning buffer queue; S3, judging the flash warnings by a network management warning module according to parameters set in the S1, and combining the oscillation flash warnings; S4, combining the oscillation flash warnings, and displaying the combined oscillation flash warnings by a network management interface; and S5, reporting the combined oscillation flash warnings by a network management northbound interface. Information of the received flash warnings is compared with information of the flash warning buffer queue in order to judge whether acquired warning information corresponding to the information of the received flash warnings exists or not. If the warning information corresponding to the information of the received flash warnings exists, the warning information is combined. If the warning information corresponding to the information of the received flash warnings does not exist, the warning information is added as new items. Through the scheme, the history warning data analysis data volume is lowered, and the warning analysis efficiency is increased. Meanwhile, great management stresses on network management databases, warning relevant data services, manufacturer network management northbound interfaces and comprehensive network management caused by a history warning data volume are relieved.
Description
Technical field
The present invention relates to the history alarm management of network management system, be specifically related to shake the merging method of dodging and accusing history alarm amount.
Background technology
In the last few years, network environment and networking structure become increasingly complex, also more and more higher to the requirement of network management system, the Real-time Collection of alarm, the promptness of response and high reliability are the basic demands to warning system, and communication network warning system is common carrier requisite instrument in operation support management.
In general, the alarm reception of alarming processing unit and disposal ability can tackle the alarm information of normal condition, but in particular cases can produce alarm windstorm at some, cause the alarm transmission of network element and the alarm of alarming processing unit to receive and process seriously asymmetric, thus there will be following problem:
(1) dodge accuse because some network reason inevitably produces a large amount of concussion, this can cause history alarm Data Analysis Data amount large, alarm data analysis work load is increased the weight of and efficiency is low;
(2) conference of history alarm data volume causes huge government pressure to the database of webmaster, alarm related Data Services, northbound interface and united net management, considerably increases the workload of alarm management, reduces the efficiency of alarm management simultaneously.
In view of this, be badly in need of providing a kind of method and system reducing history alarm Data Analysis Data amount, improve the efficiency of alert analysis efficiency and alarm management.
Summary of the invention
Technical problem to be solved by this invention how to reduce history alarm Data Analysis Data amount, to improve the problem of the efficiency of alert analysis efficiency and alarm management.
In order to solve the problems of the technologies described above, the technical solution adopted in the present invention is that the merging method of accusing history alarm amount is dodged in concussion, comprises the following steps:
S1, determine and arrange dodge accuse the duration and concussion the time interval;
S2, initialization are dodged to accuse table and dodge and are accused buffer queue;
S3, network management alarm module judge described sudden strain of a muscle announcement according to described S1 parameters, and merge concussion sudden strain of a muscle announcement;
S4, network management interface dodge announcement to described concussion and carry out merging display;
Described concussion after merging is dodged announcement and is reported by S5, webmaster northbound interface.
In the above-mentioned methods, dodge described in described S1 and accuse the duration and comprise and be less than or equal to 10 seconds, be less than or equal to 30 seconds two grades.
In the above-mentioned methods, shaking the time interval described in described S1 comprises: be less than or equal to 1 minute, be less than or equal to 2 minutes, be less than or equal to 3 minutes, be less than or equal to 4 minutes, be less than or equal to 5 minutes five grades.
In the above-mentioned methods, described sudden strain of a muscle announcement table comprises dodging accuses buffer memory index and warning information, is empty queue when described sudden strain of a muscle announcement buffer queue is initial; Described sudden strain of a muscle is accused each entry of buffer queue and is comprised: the field such as alarm source object, alarm locating information, warning code, raising Time, alarm up-to-date end time, warning count.
In the above-mentioned methods, described S3 comprises following concrete steps:
S31, according to described sudden strain of a muscle accused the duration to the alarm terminated received determine whether to dodge and accuse, accuse if dodge, turn S32; Otherwise turn S35;
S32, judge that described sudden strain of a muscle is accused alarm and whether is present in dodge and accuses in buffer queue, if not in described sudden strains of a muscle announcement buffer queue, turn S33; If accuse in buffer queue in described sudden strain of a muscle, and interval is less than or equal to the described concussion time interval, then turn S34, if interval is more than or equal to the described concussion time interval, entry in described buffer queue is turned S33 after transferring to history alarm table;
S33, accuse buffer queue in described sudden strain of a muscle this alarm is increased as new entry;
S34, increase described sudden strain of a muscle and accuse same item counting in buffer queue and add 1, and refresh the up-to-date end time, and this warning information and corresponding sudden strain of a muscle are accused buffer memory index and accuse stored in described sudden strains of a muscle and show;
S35, enter described history alarm table by normal alarm.
In the above-mentioned methods, judge in described S31 that dodging the condition of accusing is exactly be less than or equal to described sudden strain of a muscle the alarm duration to accuse the duration.
In the above-mentioned methods, described S4 specifically comprises the following steps:
The sudden strain of a muscle shown during the inquiry of S41, webmaster history alarm in described history alarm table is accused and is merged entry and count information;
S42, when needing the original record checking described merging entry, webmaster launches the described merging entry of display and accuses alarm entry corresponding in table described sudden strain of a muscle.
The information that the present invention accuses buffer queue by the information and sudden strain of a muscle of the sudden strain of a muscle received being accused alarm contrasts, see whether there is the warning information got corresponding with it, if existed, merged, if there is no, then this warning message is increased as new entry, represent and occurred new fault between network, by such scheme in reduction history alarm Data Analysis Data amount, while improving alert analysis efficiency, alleviate the database of history alarm data volume to webmaster, alarm related Data Services, producer's webmaster northbound interface and comprehensive network management cause huge government pressure.
Accompanying drawing explanation
Fig. 1 is workflow diagram of the present invention;
Fig. 2 dodges announcement table and alarm buffer queue information table in the present invention.
Embodiment
Below in conjunction with embodiment and Figure of description, the present invention is described in detail.
As shown in Figure 1, the merging method of accusing history alarm amount is dodged in concussion provided by the invention, comprises the following steps:
S1, determine and arrange dodge accuse the duration and concussion the time interval;
Wherein dodge and accuse the duration and comprise and be less than or equal to 10 seconds, be less than or equal to 30 seconds two grades;
The concussion time interval comprises: be less than or equal to 1 minute, be less than or equal to 2 minutes, be less than or equal to 3 minutes, be less than or equal to 4 minutes, be less than or equal to 5 minutes five grades.
Dodge the announcement duration and can carry out selection setting with the concussion time interval on webmaster; Alarm duration=alarm end time-alarm time of origin, concussion the time interval=same alarm object alarm next time time of origin-alarm end time last time, these two parameters are used to judge that new concussion is dodged to accuse and whether existed in sudden strain of a muscle announcement buffer queue.
S2, initialization are dodged to accuse table and dodge and are accused buffer queue;
Dodge announcement table and comprise sudden strain of a muscle announcement buffer memory index and warning information.It is empty queue that buffer queue is accused in initial sudden strain of a muscle, dodges to accuse each entry of buffer queue and comprise dodging and accuse buffer memory index, warning information and sudden strain of a muscle and accuse counting, dodges and accuses table and alarm buffer queue main information as shown in Figure 2.
S3, network management alarm module judge sudden strain of a muscle announcement according to S1 parameters, and merge concussion sudden strain of a muscle announcement;
Above-mentioned S3 concrete steps are:
S31, to the alarm terminated received according to sudden strain of a muscle accuse the duration determine whether dodge accuse, if dodge accuse, turn S32; Otherwise turn S35;
S32, judge that this sudden strain of a muscle is accused alarm and whether is present in dodge and accuses in buffer queue, if do not accused in buffer queue in sudden strain of a muscle, turn S33; If accused in buffer queue in sudden strain of a muscle, and interval is less than or equal to the concussion time interval, then turn S34, if interval is more than or equal to the concussion time interval, turns S33 after entry in buffer queue is transferred to history alarm table;
S33, sudden strain of a muscle accuse buffer queue this alarm is increased as new entry;
S34, increase sudden strain of a muscle are accused same item counting in buffer queue and are added 1, and refresh the up-to-date end time, and the sudden strain of a muscle announcement buffer memory index of this warning information and correspondence is accused table stored in sudden strain of a muscle;
S35, enter history alarm table by normal alarm.
S4, network management interface dodge announcement to concussion and carry out merging display;
The concrete steps of above-mentioned S4 are:
The sudden strain of a muscle shown during the inquiry of S41, webmaster history alarm in history alarm table is accused and is merged rear entry and count information;
S42, when need to check merge the original record of entry time, webmaster launches this entry of display dodging and accuses alarm entry corresponding in table.
Concussion after merging is dodged announcement and is reported by S5, webmaster northbound interface.
Specific works flow process of the present invention is: first carry out determining on webmaster and arrange to dodge accusing duration and the concussion time interval, initialization is simultaneously dodged to accuse table and dodge and is accused buffer queue, the information of then sudden strain of a muscle that receives being accused to alarm with dodge the information of accusing buffer queue and contrast, see whether there is the warning information got corresponding with it, if there is no corresponding information, then will perform S33, and represent and occurred new fault between network.If the information that alarm is accused in the sudden strain of a muscle received exists, but the concussion time interval that the concussion that alarm is accused in this sudden strain of a muscle sets in S1, so perform S33.
Exist if the warning information got accuses buffer queue in sudden strain of a muscle, and the concussion time interval that alarm is accused in this sudden strain of a muscle is less than or equal to the concussion time interval set in S1, then increase the data entries counting dodging correspondence in announcement buffer queue and add 1, and refresh the up-to-date end time, achieve the merging of identical concussion alarm information, and this warning information and corresponding sudden strain of a muscle are accused buffer memory index stored in sudden strain of a muscle announcement table, network management interface carries out merging display to concussion sudden strain of a muscle announcement afterwards, when webmaster history alarm is inquired about, entry and count information are accused in the sudden strain of a muscle after the merging of display history alarm table, when if desired checking the original record merging entry, webmaster launches this entry of display and is dodging alarm entry corresponding in announcement table, concussion after merging is dodged announcement and is reported by last webmaster northbound interface, so just only reports the sudden strain of a muscle after merging to accuse, greatly reduces the data volume of history alarm information reporting.
The present invention is not limited to above-mentioned preferred forms, and anyone should learn the structural change made under enlightenment of the present invention, and every have identical or close technical scheme with the present invention, all falls within protection scope of the present invention.
Claims (7)
1. the merging method of accusing history alarm amount is dodged in concussion, it is characterized in that, comprises the following steps:
S1, determine and arrange dodge accuse the duration and concussion the time interval;
S2, initialization are dodged to accuse table and dodge and are accused buffer queue;
S3, network management alarm module judge described sudden strain of a muscle announcement according to described S1 parameters, and merge concussion sudden strain of a muscle announcement;
S4, network management interface dodge announcement to described concussion and carry out merging display;
Described concussion after merging is dodged announcement and is reported by S5, webmaster northbound interface.
2. the merging method of accusing history alarm amount is dodged in concussion as claimed in claim 1, it is characterized in that, the announcement duration of sudden strain of a muscle described in described S1 comprises and is less than or equal to 10 seconds, be less than or equal to 30 seconds two grades.
3. the merging method of accusing history alarm amount is dodged in concussion as claimed in claim 1, it is characterized in that, shaking the time interval described in described S1 comprises: be less than or equal to 1 minute, be less than or equal to 2 minutes, be less than or equal to 3 minutes, be less than or equal to 4 minutes, be less than or equal to 5 minutes five grades.
4. the merging method of accusing history alarm amount is dodged in concussion as claimed in claim 1, and it is characterized in that, described S3 comprises following concrete steps:
S31, according to described sudden strain of a muscle accused the duration to the alarm terminated received determine whether to dodge and accuse, accuse if dodge, turn S32; Otherwise turn S35;
S32, judge that described sudden strain of a muscle is accused alarm and whether is present in dodge and accuses in buffer queue, if not in described sudden strains of a muscle announcement buffer queue, turn S33; If accuse in buffer queue in described sudden strain of a muscle, and interval is less than or equal to the described concussion time interval, then turn S34, if interval is more than or equal to the described concussion time interval, entry in described buffer queue is turned S33 after transferring to history alarm table;
S33, accuse buffer queue in described sudden strain of a muscle this alarm is increased as new entry;
S34, increase described sudden strain of a muscle and accuse same item counting in buffer queue and add 1, and refresh the up-to-date end time, and this warning information and corresponding sudden strain of a muscle are accused buffer memory index and accuse stored in described sudden strains of a muscle and show;
S35, enter described history alarm table by normal alarm.
5. the merging method of accusing history alarm amount is dodged in concussion as claimed in claim 3, it is characterized in that, judges that dodging the condition of accusing is exactly be less than or equal to described sudden strain of a muscle the alarm duration to accuse the duration in described S31.
6. the merging method of accusing history alarm amount is dodged in concussion as claimed in claim 1, and it is characterized in that, described S4 specifically comprises the following steps:
The sudden strain of a muscle shown during the inquiry of S41, webmaster history alarm in described history alarm table is accused and is merged entry and count information;
S42, when needing the original record checking described merging entry, webmaster launches the described merging entry of display and accuses alarm entry corresponding in table described sudden strain of a muscle.
7. merging method of shaking sudden strain of a muscle announcement history alarm amount as claimed in claim 1, is characterized in that, described sudden strain of a muscle announcement table comprises dodging accuses buffer memory index and warning information, is empty queue when described sudden strain of a muscle announcement buffer queue is initial; Described sudden strain of a muscle is accused each entry of buffer queue and is comprised: the field such as alarm source object, alarm locating information, warning code, raising Time, alarm up-to-date end time, warning count.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510660544.5A CN105357032A (en) | 2015-10-14 | 2015-10-14 | Method for combining history warning quantities of oscillation flash warnings |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510660544.5A CN105357032A (en) | 2015-10-14 | 2015-10-14 | Method for combining history warning quantities of oscillation flash warnings |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105357032A true CN105357032A (en) | 2016-02-24 |
Family
ID=55332909
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510660544.5A Pending CN105357032A (en) | 2015-10-14 | 2015-10-14 | Method for combining history warning quantities of oscillation flash warnings |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105357032A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110086655A (en) * | 2019-04-02 | 2019-08-02 | 武汉烽火技术服务有限公司 | Communication network alarm data analysis method and system based on network oscillation intensity |
| CN111555917A (en) * | 2020-04-26 | 2020-08-18 | 四川爱创科技有限公司 | Alarm information processing method and device based on cloud platform |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20030110398A1 (en) * | 2001-11-29 | 2003-06-12 | International Business Machines Corporation | Method, computer program element and a system for processing alarms triggered by a monitoring system |
| CN1462130A (en) * | 2002-05-27 | 2003-12-17 | 华为技术有限公司 | Treatment method of flash cut worning in network management system |
| CN102034148A (en) * | 2010-12-08 | 2011-04-27 | 山东浪潮齐鲁软件产业股份有限公司 | Method for realizing event alert and storm-proof policy of monitoring system |
| CN102118275A (en) * | 2009-12-30 | 2011-07-06 | 大唐移动通信设备有限公司 | Alarm storm processing method and processing device |
| CN102594590A (en) * | 2012-02-06 | 2012-07-18 | 烽火通信科技股份有限公司 | Inhibition method of oscillation alarms in alarm active reports |
| CN102625349A (en) * | 2012-03-09 | 2012-08-01 | 浪潮通信信息系统有限公司 | Method for processing data under alarm storm |
| CN104753700A (en) * | 2013-12-27 | 2015-07-01 | 中国银联股份有限公司 | Alarm storm processing method and alarm storm processing system |
-
2015
- 2015-10-14 CN CN201510660544.5A patent/CN105357032A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20030110398A1 (en) * | 2001-11-29 | 2003-06-12 | International Business Machines Corporation | Method, computer program element and a system for processing alarms triggered by a monitoring system |
| CN1462130A (en) * | 2002-05-27 | 2003-12-17 | 华为技术有限公司 | Treatment method of flash cut worning in network management system |
| CN102118275A (en) * | 2009-12-30 | 2011-07-06 | 大唐移动通信设备有限公司 | Alarm storm processing method and processing device |
| CN102034148A (en) * | 2010-12-08 | 2011-04-27 | 山东浪潮齐鲁软件产业股份有限公司 | Method for realizing event alert and storm-proof policy of monitoring system |
| CN102594590A (en) * | 2012-02-06 | 2012-07-18 | 烽火通信科技股份有限公司 | Inhibition method of oscillation alarms in alarm active reports |
| CN102625349A (en) * | 2012-03-09 | 2012-08-01 | 浪潮通信信息系统有限公司 | Method for processing data under alarm storm |
| CN104753700A (en) * | 2013-12-27 | 2015-07-01 | 中国银联股份有限公司 | Alarm storm processing method and alarm storm processing system |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110086655A (en) * | 2019-04-02 | 2019-08-02 | 武汉烽火技术服务有限公司 | Communication network alarm data analysis method and system based on network oscillation intensity |
| CN111555917A (en) * | 2020-04-26 | 2020-08-18 | 四川爱创科技有限公司 | Alarm information processing method and device based on cloud platform |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109408337B (en) | Interface operation and maintenance method and device | |
| CN105354314B (en) | Data migration method and device | |
| CN108509313B (en) | Service monitoring method, platform and storage medium | |
| CN105468492A (en) | SE(search engine)-based data monitoring method and system | |
| CN111782470B (en) | Distributed container log data processing method and device | |
| CN104125095A (en) | System and method for monitoring event failure in real time | |
| CN104281684A (en) | Method and system for storing and querying mass logs | |
| CN107247763A (en) | Business datum statistical method, device, system, storage medium and electronic equipment | |
| CN112559237A (en) | Operation and maintenance system troubleshooting method and device, server and storage medium | |
| CN106599120A (en) | Stream processing framework-based data processing method and apparatus | |
| CN107577550B (en) | Method and device for determining whether response of access request is abnormal | |
| CN105357032A (en) | Method for combining history warning quantities of oscillation flash warnings | |
| CN109558299A (en) | Business monitoring and the method, apparatus of early warning, equipment and storage medium | |
| CN104539449B (en) | A kind of failure information processing method and relevant apparatus | |
| CN103297477B (en) | A kind of data acquisition reporting system and data processing method and proxy server | |
| CN109245309A (en) | A kind of power grid warning information standardization processing method and device | |
| CN101355446B (en) | Compression treatment method for alarm report and apparatus for compressing alarm | |
| CN104507059B (en) | A kind of multimedia message transmitting administrative method and multimedia message send managing device | |
| CN105245394A (en) | Method and equipment for analyzing network access log based on layered approach | |
| CN106599221A (en) | Data processing method and device | |
| CN116260703A (en) | Distributed message service node CPU performance fault self-recovery method and device | |
| CN105446707A (en) | Data conversion method | |
| CN103778218A (en) | Cloud computation-based standard information consistency early warning system and method | |
| CN113434366A (en) | Event processing method and system | |
| US8214846B1 (en) | Method and system for threshold management |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20180323 Address after: 430074 Wuhan, Hongshan Province District Road, Department of mail, No. 88 hospital Applicant after: Fenghuo Communication Science &. Technology Co., Ltd. Applicant after: WUHAN FIBERHOME TECHNICAL SERVICES CO., LTD. Address before: 430074 East Lake Development Zone, Hubei, Optics Valley Venture Street, No. 67, No. Applicant before: Fenghuo Communication Science &. Technology Co., Ltd. |
|
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20160224 |